Revil — every breach we're tracking
Running log of incidents attributed to or claimed by Revil in public reporting, with what was exposed and what victims should do. Updated as new incidents are ingested.
Groups like Revil steal data first and extort second — and the stolen records rarely stay private. Once a victim organization's data hits a leak site, the personal details inside (names, emails, phones, addresses) get scraped into the same broker-and-dump ecosystem every doxxer searches. If an organization you've used appears below, treat your data as circulating.
Tracked incidents
Showing the 60 most recent of 89 incidents we've attributed to Revil.
Sunknowledge Services Inc Listed by revil Ransomware Group
Sunknowledge Services Inc was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
kusd.edu Listed by revil Ransomware Group
kusd.edu was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
medibank.com.au Listed by revil Ransomware Group
medibank.com.au was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
Midea Group Listed by revil Ransomware Group
Midea Group was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
Doosan Group Listed by revil Ransomware Group
Doosan Group was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
OptiProERP is a leading global provider of industry-specific ERP solutions for manufacture Listed by revil Ransomware Group
OptiProERP is a leading global provider of industry-specific ERP solutions for manufacture was listed on the revil ransomware leak site. The…
Ludwig Freytag Group Listed by revil Ransomware Group
Ludwig Freytag Group was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
Unicity International Listed by revil Ransomware Group
Unicity International was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
Stratford University Listed by revil Ransomware Group
Stratford University was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
Asfaltproductienijmegen Listed by revil Ransomware Group
Asfaltproductienijmegen was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
CYMZ Listed by revil Ransomware Group
CYMZ was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
www.oil-india.com Listed by revil Ransomware Group
www.oil-india.com was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
Visotec Group www.visotec.com Listed by revil Ransomware Group
Visotec Group www.visotec.com was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
PTT Exploration and Production - 720GB Listed by revil Ransomware Group
PTT Exploration and Production - 720GB was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
ECKERD PERU S.A, INKAFARMA, MIFARMA Listed by revil Ransomware Group
ECKERD PERU S.A, INKAFARMA, MIFARMA was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
Join us on RAMP Listed by revil Ransomware Group
Join us on RAMP was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
Ronmor Holdings Listed by revil Ransomware Group
Ronmor Holdings was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
Fimmick CRM Honk Kong (www.fimmick.com) Listed by revil Ransomware Group
Fimmick CRM Honk Kong (www.fimmick.com) was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
Fimmick CRM Hong Kong (www.fimmick.com) Listed by revil Ransomware Group
Fimmick CRM Hong Kong (www.fimmick.com) was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
Spiezle Architectural Group Inc. Listed by revil Ransomware Group
Spiezle Architectural Group Inc. was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
ohiograting.com Listed by revil Ransomware Group
ohiograting.com was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
angstrom automotive group Listed by revil Ransomware Group
angstrom automotive group was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
Allen, Dyer, Doppelt, & Gilchrist, P.A. Listed by revil Ransomware Group
Allen, Dyer, Doppelt, & Gilchrist, P.A. was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
Betenbough Homes Listed by revil Ransomware Group
Betenbough Homes was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
CEC Vibration Products Listed by revil Ransomware Group
CEC Vibration Products was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
ENPOL LLC Listed by revil Ransomware Group
ENPOL LLC was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
Iaffaldano, Shaw & Young LLP Listed by revil Ransomware Group
Iaffaldano, Shaw & Young LLP was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
Möbelstadt Sommerlad Listed by revil Ransomware Group
Möbelstadt Sommerlad was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
neroindustry.com Listed by revil Ransomware Group
neroindustry.com was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
KASEYA ATTACK INFO Listed by revil Ransomware Group
KASEYA ATTACK INFO was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
Hx5, LLC Listed by revil Ransomware Group
Hx5, LLC was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
Primo Water Listed by revil Ransomware Group
Primo Water was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
ensingerplastics.com Listed by revil Ransomware Group
ensingerplastics.com was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
Apex America Listed by revil Ransomware Group
Apex America was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
Gosiger Listed by revil Ransomware Group
Gosiger was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
kuk.de / KREBS + KIEFER / 500GB Listed by revil Ransomware Group
kuk.de / KREBS + KIEFER / 500GB was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
inocean.no / 2000 GB Listed by revil Ransomware Group
inocean.no / 2000 GB was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
Daylesford - BHoldings - Bamford - The Wild Rabbit Listed by revil Ransomware Group
Daylesford - BHoldings - Bamford - The Wild Rabbit was listed on the revil ransomware leak site. The group claims to have stolen internal da…
Agile Property Holdings Listed by revil Ransomware Group
Agile Property Holdings was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
lstaff.com / atworksprofessional / atworks.com Listed by revil Ransomware Group
lstaff.com / atworksprofessional / atworks.com was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
South Carolina Legal Services breach Listed by revil Ransomware Group
South Carolina Legal Services breach was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
Kaseya clients Listed by revil Ransomware Group
Kaseya clients was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
University Medical Center Listed by revil Ransomware Group
University Medical Center was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
Fujifilm Listed by revil Ransomware Group
Fujifilm was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
JBS (meat processor) Listed by revil Ransomware Group
JBS (meat processor) was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
Sol Oriens Listed by revil Ransomware Group
Sol Oriens was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
Brazil's Tribunal de Justiça do Estado do Rio Grande do Sul Listed by revil Ransomware Group
Brazil's Tribunal de Justiça do Estado do Rio Grande do Sul was listed on the revil ransomware leak site. The group claims to have stolen in…
Apple MacBook via supplier Quanta Computer Listed by revil Ransomware Group
Apple MacBook via supplier Quanta Computer was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
Asteelflash Listed by revil Ransomware Group
Asteelflash was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
Pierre Fabre Listed by revil Ransomware Group
Pierre Fabre was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
Acer Listed by revil Ransomware Group
Acer was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
Gyrodata Incorporated Listed by revil Ransomware Group
Gyrodata Incorporated was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
Standley Systems (vendor to Healthcare Sector) Listed by revil Ransomware Group
Standley Systems (vendor to Healthcare Sector) was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
Dairy Farm Group Listed by revil Ransomware Group
Dairy Farm Group was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
Transform Hospital Group LTD Listed by revil Ransomware Group
Transform Hospital Group LTD was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
Managed[.]com (Web Hosting Provider for Columbus County, NC, Griffin Hospital in CT, Arizona Judicial Branch, and Jackson County, OR, among others) Listed by revil Ransomware Group
Managed[.]com (Web Hosting Provider for Columbus County, NC, Griffin Hospital in CT, Arizona Judicial Branch, and Jackson County, OR, among …
Beacon Health Solutions Listed by revil Ransomware Group
Beacon Health Solutions was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
Banco Estado (Public Bank) Listed by revil Ransomware Group
Banco Estado (Public Bank) was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
Haberdashers’ Monmouth Schools Listed by revil Ransomware Group
Haberdashers’ Monmouth Schools was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
Ma Labs Listed by revil Ransomware Group
Ma Labs was listed on the revil ransomware leak site. The group claims to have stolen internal data.…
Your email leaked. See who’s selling your address.
Nobody can unleak a breach. But the people-search sites selling your address because of it? Those come down. The free scan shows you which ones have you, in 15 seconds. Then you pick what fits.